Area(s) of responsibility Key Responsibilities • Lead the design and implementation of enterprise-scale Azure architectures and Landing Zones. • Define cloud governance, subscription strategy, management groups, policies, RBAC, and resource organization standards. • Architect Hub-Spoke, Virtual WAN, hybrid cloud, and multi-region Azure environments. • Design and implement Microsoft Entra ID solutions including Hybrid Identity, SSO, MFA, Conditional Access, PIM, Identity Governance, and Zero Trust architectures. • Develop cloud security architectures leveraging Defender for Cloud, Sentinel, Key Vault, Azure Firewall, and compliance frameworks. • Drive Infrastructure-as-Code (Terraform, Bicep, ARM Templates) and CI/CD automation using Azure DevOps and GitHub Actions. • Design monitoring, observability, disaster recovery, and business continuity solutions. • Engage with business and technical stakeholders, lead architecture reviews, and mentor cloud engineering teams. Required Skills • Azure Landing Zone Architecture • Microsoft Entra ID & Identity Governance • Azure Networking, Security, and Governance • Azure Virtual WAN, Management Groups, Azure Policy • Terraform, Bicep, ARM Templates • Azure DevOps & GitHub Actions • Microsoft Defender for Cloud & Sentinel • Hybrid Cloud and Migration Architectures • Zero Trust Security Framework Experience & Qualifications • 12+ years of overall IT experience with 7+ years in Azure Cloud Architecture. • Proven experience designing and deploying Azure Landing Zones at enterprise scale. • Strong expertise in Microsoft Entra ID and identity modernization initiatives. • Experience with cloud migrations, platform modernization, and governance implementation. • Strong stakeholder management and technical leadership skills. Preferred Certifications • Azure Solutions Architect Expert (AZ-305) • Azure Administrator Associate (AZ-104) • Identity and Access Administrator Associate (SC-300) • Azure Security Engineer (AZ-500) • TOGAF (Preferred) Success Measures • Successful deployment of enterprise Azure Landing Zones. • Secure and compliant Microsoft Entra implementation. • Reduced cloud operational risks through governance and automation. • Standardized Azure architecture across business units. • Improved identity security posture aligned to Zero Trust principles.